• Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

EBS 2008 TMG issue

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [Threat Management Gateway (TMG) 2010] >> General >> EBS 2008 TMG issue Page: [1]
Message << Older Topic   Newer Topic >>
EBS 2008 TMG issue - 6.Apr.2009 11:42:03 AM   


Posts: 3
Joined: 6.Apr.2009
Status: offline
I have migrated from a sbs 2003 environment to a ebs 2008 environment.

Everything is working except for Outlook Anywhere.

Owa, Active-Sync, and RWW all work through the TMG server to the external users.

Outlook anywhere however does not work and produces the following error on the TMG/ISA server:

12309 The server requires authorization to fulfill the request. Access to the web server is denied. Contact the server administrator.

I have searched high and low for some idea of what this error is actually telling me and I haven't had any luck.

We are using a single SSL cert assigned to the external connector (IE: mail.company.com) and I know it is configured properly because OWA/Active-sync/RWW all work without a problem.

When attempting to connect using OutlookAnywhere it constantly asks for authentication and never actually makes a connection.

I noticed when connecting to OWA i am prompted to login to the forefrontTMG and then prompted again to login to OWA.  Is this normal?  I'm not sure why it is requiring 2 sets of authentication.

Any help is much appriciated.
Post #: 1
RE: EBS 2008 TMG issue - 6.Apr.2009 2:54:12 PM   


Posts: 3
Joined: 6.Apr.2009
Status: offline
I have continued to troubleshoot this issue with RPCPING and still no luck, something is blocking the RPC over http requests from ISA to the exch07 server.

it is like i have to login to ISA before I can login to exchange, and the multiple logins seems to be causing the failure.

(in reply to njcfm)
Post #: 2
RE: EBS 2008 TMG issue - 6.Apr.2009 4:24:01 PM   


Posts: 1130
Joined: 29.Jun.2001
From: Hamilton, Bermuda
Status: offline
FBA should be disabled on the exchange server.



ISA 2006 Book! - http://tinyurl.com/2gpoo8
TMG Bible - http://tinyurl.com/ykv85hr

The built in ISA help is likely the most comprehensive help built into an application anywhere. USE it!!! Search it!!! RTFM

(in reply to njcfm)
Post #: 3
RE: EBS 2008 TMG issue - 7.Apr.2009 9:26:18 AM   


Posts: 3
Joined: 6.Apr.2009
Status: offline
I did this and it did resolve the double login issue when connecting to OWA.

however rpc-over-http still does not work.

I'll keep plugging away at the issue.

(in reply to SteveMoffat)
Post #: 4
RE: EBS 2008 TMG issue - 7.Apr.2009 10:38:11 AM   


Posts: 235
Joined: 7.Nov.2004
From: Zamboanga, Philippines
Status: offline

Make sure that you publish RPC over HTTP separate from publishing OWA. In my scenario RPC over HTTP/s does not work if FBA is enabled either on Exchange or TMG/ISA.


(in reply to njcfm)
Post #: 5
RE: EBS 2008 TMG issue - 9.Apr.2009 9:21:00 AM   


Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
RPC/HTTP will work fine on the same listener that has FBA enabled, because basic authentication is used as a fail back.

If RPC/HTTP isn't working, it might be because of a name resolution issue, a certificate issue, or a Exchange Server configuration issue, or an authentication issue. Got to look at all of those things and more.

One thing is sure -- looking at the ISA logs will be of absolutley no value in troubleshooting RPC/HTTP.



Thomas W Shinder, M.D.

(in reply to ianfermo)
Post #: 6

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [Threat Management Gateway (TMG) 2010] >> General >> EBS 2008 TMG issue Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts